*.baseball.cbssports.com

- CBS Interactive Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0b:6b:24:88:cd:e3:f6:cd:a4:53:7c:75:d8:ab:30:be was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CBS Interactive Inc.

Organization: CBS Interactive Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:6b:24:88:cd:e3:f6:cd:a4:53:7c:75:d8:ab:30:be
Serial Number (int): 15177824722993153228286341238628233406
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c9:e2:57:27:e8:96:ce:de:7f:f2:eb:b1:8c:01:6f:8f:f5:6c:1b:b6
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 44:5c:87:6b:d7:e3:9d:db:4c:5f:d9:54:c8:0c:4e:36:4c:b1:03:72
Fingerprint (sha256): 18:85:ec:de:ad:b4:36:d0:c0:30:93:71:d1:75:80:c1:80:6e:ea:1c:f7:1b:db:68:4f:e1:3e:a1:cf:ee:29:0e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate *.baseball.cbssports.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.baseball.cbssports.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.baseball.cbssports.com
baseball.cbssports.com

Other certificates including the domain name cbssports.com

(limited to 100 certificates)
sli.cbssports.com
ey-campfire.com
cbslocal.com
radio.cbssports.com
*.baseball.cbssports.com
cc.cnetcontent.com
devemendous.com
image.e.outdoors.org
*.basketball.cbssports.com
image.e.outdoors.org
image.e.outdoors.org
safety.cbssports.com
penyadap.com
*.cbssports.com
gottlieb.radio.cbssports.com
*.mayhem.cbssports.com
www.bitfog.co
cbssports.com
cbssports.com
*.basketball.cbssports.com
justdogs.app
*.cbssports.com
sportsnowplanning.cbssports.com
n1to.com
tls.automattic.com
cc.cnetcontent.com
cbssports.com
*.basketball.cbssports.com
*.hockey.cbssports.com
tls.automattic.com
horseracing.cbssports.com
gottlieb.radio.cbssports.com
agartheanstudios.co
gottlieb.radio.cbssports.com
secure01.teamfanshop.com
secure01.teamfanshop.com
tls.automattic.com
*.cbssports.com
cc.cnetcontent.com
qa.app.pspro.ai
secure01.teamfanshop.com
*.football.cbssports.com
nabilcook.com
cc.cnetcontent.com
image.e.outdoors.org
*.baseball.cbssports.com
*.hockey.cbssports.com
cc.cnetcontent.com
tikiandtierney.radio.cbssports.com
image.e.outdoors.org
*.cbssports.com
business.shopsavee.com
tropez-pearls.com
*.ephm-bison.cbssports.com
*.hockey.cbssports.com
*.football.qa.cbssports.com
sushiuplus.ca
image.e.outdoors.org
secure01.teamfanshop.com
image.e.outdoors.org
*.basketball.cbssports.com
secure01.teamfanshop.com
cc.cnetcontent.com
gottlieb.radio.cbssports.com
*.apipufi.cbssports.com
*.cbssports.com
*.hera.cbssports.com
*.cbssports.com
*.cbssports.com
*.apipufi.cbssports.com
*.cbssports.com
thesimplegeography.de
shop.cbssports.com
secure01.teamfanshop.com
gottlieb.radio.cbssports.com
coderbin.com
*.cbssports.com
gottlieb.radio.cbssports.com
thesimplegeography.de
firebasetest.mglsk.be
image.e.outdoors.org
secure01.teamfanshop.com
secure01.teamfanshop.com
image.e.outdoors.org
meta-studio.world
ops.cbssports.com
saa.cbssports.com
nucdn.cbssports.com
fantasy.img.cbssports.com
click.email.cbssports.com
mta-sts.openresearch.news
secure01.teamfanshop.com
sechighlights.cbssports.com
www.litz.co
www.seelan.co
*.mayhem.cbssports.com
gottlieb.radio.cbssports.com
*.hockey.cbssports.com
cc.cnetcontent.com
secure01.teamfanshop.com

Certificate

The complete raw certificate details for *.baseball.cbssports.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArPcNOWSSPgc+lvbLY/0b
OhaNrKY5SKXwG4rKlybZYOqPiM65lPbiGOsgXNI7I7xiulUo3DORNIeZgwGn3uH2
tFRfPNG11K11GlIHPGBns0vHO8/xD9PiDxTldTX3UgMw92XWv+FXOUOExz6Z1VLF
0vb8SZjF0gXSP5jhAgTqa3NUYd/KQn8YCAU6eZpOWC/sAMGxBF+Po/mVw5vgbUBw
h6it0vqZE6EoUtW2kZlzRC+LIQSipOk5HnIUcubOZy2kCYrNI+aj/isErLI/Xld8
F6Z7D/ubirs/2SoY0j6ZfLMjNhsjpqdoCKHJf09m2dgNA9DEcUEzUC7cIH1q3pMQ
qZwF52usCWrF9p/sB7t5rqcYPKtna/gH0MDdbvb15mTLDaUDnB5IsSPWVmoTno7h
h+WEI99ax6a1+dbfj0Qwv8IgCEGRValqSEPug3Nl6g3eNrw0RLzUwEiUE2cvt+b4
IvFcfG+trJ0bh+hzyyFdxWZtp/T2tcSD4A/DPwxDHVJOWjX9DyJg5yUBDcAYA2zB
MPOgalIC9lEShgKSoM7VJIHpM2Luu6a8znwf5GQANDkEIEY0Tm2rZ8xiQh4oFcEx
UCEV9eYQWKSYRTiFUoVVdk8DH35LMpFqGSjFh+/TeuCCLg5s1F8Q5jNhvGWoGFoF
yXartxnhBDfAPL1mYA0M5PcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15177824722993153228286341238628233406
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-06 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CBS Interactive Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.baseball.cbssports.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 705635821992259484404349436677425630856701846718351802900017611055659611035464485874254843558138052595477767309612970869178077295354300585081974846927198793916824982654825328801154244223608041319658041870408353550175724239224589831728968533534345183302333186772062768175129827484559042971092171782826630122474371198487229168916991211740039996859473168637463179241015543372795445788390418576829407764047075714985689614662409811121332246616349381422914191269870749268472820961941898251632867697014350498712483914840465485057164114672479482814138468731625760498322824661057634274969421393852787706928104028090493743685772291288210822891862480873011600883742835085717828223726672377196602759901541434928070388456619672899546791985120094581719955250558723827000594389848308446387762573089665645227248916680435036460918152917138573261016171794709421017071201586182775724358600874577380917713587289411959088883301220042519595237636926085141806942951932761905917974974059992189259486521833579357673475934438133245430118162581680317579704707295533966237404943403587080619261792479177361354673452848007777803206991247028156093633874016952233701365327737710520442043266138273523442122057389715857164019326988431284067248444151373375046985508087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9e25727e896cede7ff2ebb18c016f8ff56c1bb6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baseball.cbssports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseball.cbssports.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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